Overview

overview

8

Static

static

8

OperaInstaller.exe

windows10-2004-x64

8

OperaInstaller.exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/09/2026, 03:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample260930-dpjdaax17l
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Adds Run key to start application 2 TTPs 4 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 18 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 22 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 3 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 9 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 56 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 21 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 44 IoCs
  • Suspicious use of SendNotifyMessage 44 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3424
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3712
      • C:\Users\Admin\AppData\Local\Temp\7zS08EC1659\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS08EC1659\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Reads the TCP/IP host and domain name from the registry
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:124
        • C:\Users\Admin\AppData\Local\Temp\7zS08EC1659\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS08EC1659\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2b4,0x2b8,0x2bc,0x294,0x2c0,0x7ff7d0826998,0x7ff7d08269a8,0x7ff7d08269b8
          4⤵
          • Executes dropped EXE
          PID:4444
        • C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:4052
        • C:\Users\Admin\AppData\Local\Temp\7zS08EC1659\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS08EC1659\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=124 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_20260930041132" --session-guid=36a26e7a-9533-416c-83a0-45f16d1a1288 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=1008000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Suspicious use of WriteProcessMemory
          PID:1016
          • C:\Users\Admin\AppData\Local\Temp\7zS08EC1659\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS08EC1659\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2ac,0x2b0,0x2c0,0x288,0x2c4,0x7ff7d0826998,0x7ff7d08269a8,0x7ff7d08269b8
            5⤵
            • Executes dropped EXE
            PID:4944
          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe" --backend --initial-pid=124 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321" --session-guid=36a26e7a-9533-416c-83a0-45f16d1a1288 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=136.0.6008.52
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:4940
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2b8,0x2bc,0x2c0,0x294,0x2c4,0x7ff60f146998,0x7ff60f1469a8,0x7ff60f1469b8
              6⤵
              • Executes dropped EXE
              PID:3344
            • C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Writes a Windows system DLL name to a user directory
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:4868
              • C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x254,0x258,0x25c,0x230,0x260,0x9fc9cc,0x9fc9d8,0x9fc9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4992
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:3060
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0xe4,0x258,0x4fc9cc,0x4fc9d8,0x4fc9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:4296
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:4424
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:5036
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffe14ed5d30,0x7ffe14ed5d40,0x7ffe14ed5d50
                      10⤵
                      • Executes dropped EXE
                      PID:2724
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:2744
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x288,0x28c,0x290,0x284,0x294,0x7ffe14ed5d30,0x7ffe14ed5d40,0x7ffe14ed5d50
                      10⤵
                      • Executes dropped EXE
                      PID:2592
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2a0,0x2d0,0x1237324,0x1237330,0x123733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:4092
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:2792
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffe14ed5d30,0x7ffe14ed5d40,0x7ffe14ed5d50
                        11⤵
                        • Executes dropped EXE
                        PID:5924
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:1324
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffe14ed5d30,0x7ffe14ed5d40,0x7ffe14ed5d50
                        11⤵
                        • Executes dropped EXE
                        PID:5468
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:4828
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffe14ed5d30,0x7ffe14ed5d40,0x7ffe14ed5d50
                        11⤵
                        • Executes dropped EXE
                        PID:4844
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:5764
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffe14ed5d30,0x7ffe14ed5d40,0x7ffe14ed5d50
                7⤵
                • Executes dropped EXE
                PID:5548
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1632,i,5695801211192895645,13975993624191265283,262144 --field-trial-handle=2036,i,15459714940799071788,9478294646557555221,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,17472447583881366742,13258935753252638360,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2032 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:2124
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1932,i,13088491470961446561,6402929206552481488,524288 --field-trial-handle=2036,i,15459714940799071788,9478294646557555221,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,17472447583881366742,13258935753252638360,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2172 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                PID:1716
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2560,i,8168016035922423599,7072462697481336361,524288 --field-trial-handle=2036,i,15459714940799071788,9478294646557555221,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,17472447583881366742,13258935753252638360,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2760 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4564
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3384,i,12933586608706265736,14465374177205278912,2097152 --field-trial-handle=2036,i,15459714940799071788,9478294646557555221,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,17472447583881366742,13258935753252638360,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3404 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:2404
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4268,i,4905217826974810498,11473152380777993110,524288 --field-trial-handle=2036,i,15459714940799071788,9478294646557555221,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,17472447583881366742,13258935753252638360,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4296 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5440
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4484,i,15547413115739974566,14771920954602540844,2097152 --field-trial-handle=2036,i,15459714940799071788,9478294646557555221,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,17472447583881366742,13258935753252638360,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4560 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5676
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4760,i,5169959791050136526,15296829038028062238,524288 --field-trial-handle=2036,i,15459714940799071788,9478294646557555221,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,17472447583881366742,13258935753252638360,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4788 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:2140
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4904,i,13167764748950433446,7721867126542205064,524288 --field-trial-handle=2036,i,15459714940799071788,9478294646557555221,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,17472447583881366742,13258935753252638360,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5032 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5556
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5184,i,16645672936693361630,13587546415673661221,2097152 --field-trial-handle=2036,i,15459714940799071788,9478294646557555221,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,17472447583881366742,13258935753252638360,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5196 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1076
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3440,i,5127884604489382188,5548448228126358672,524288 --field-trial-handle=2036,i,15459714940799071788,9478294646557555221,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,17472447583881366742,13258935753252638360,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3624 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:1480
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\additional_file2.tmp"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:2416
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffe14ed5d30,0x7ffe14ed5d40,0x7ffe14ed5d50
                7⤵
                • Executes dropped EXE
                PID:6020
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1632,i,17246704662933725814,11576847474499951021,262144 --field-trial-handle=2120,i,6694151846812028772,2113373613380067972,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2124,i,17410426856624826927,13495461675662216965,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2116 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6016
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1884,i,14864360733487316205,1825200765203162555,524288 --field-trial-handle=2120,i,6694151846812028772,2113373613380067972,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2124,i,17410426856624826927,13495461675662216965,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2152 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:6276
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2568,i,14471262376242746624,8855478266222259653,524288 --field-trial-handle=2120,i,6694151846812028772,2113373613380067972,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2124,i,17410426856624826927,13495461675662216965,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2336 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6304
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3952,i,7412589338999773641,17594894281275151105,2097152 --field-trial-handle=2120,i,6694151846812028772,2113373613380067972,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2124,i,17410426856624826927,13495461675662216965,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4068 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6556
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4044,i,5261332050012438685,14783665053064669581,524288 --field-trial-handle=2120,i,6694151846812028772,2113373613380067972,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2124,i,17410426856624826927,13495461675662216965,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4020 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6544
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4336,i,3315005410942963451,1961274361161173025,2097152 --field-trial-handle=2120,i,6694151846812028772,2113373613380067972,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2124,i,17410426856624826927,13495461675662216965,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4348 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:6648
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3968,i,6673686987217468023,12804962863902712408,524288 --field-trial-handle=2120,i,6694151846812028772,2113373613380067972,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2124,i,17410426856624826927,13495461675662216965,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=2076 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6796
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4912,i,5910040045333691706,9210304140920599759,524288 --field-trial-handle=2120,i,6694151846812028772,2113373613380067972,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2124,i,17410426856624826927,13495461675662216965,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4924 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6380
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5176,i,16934184723697433822,4426470205701317680,524288 --field-trial-handle=2120,i,6694151846812028772,2113373613380067972,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2124,i,17410426856624826927,13495461675662216965,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5136 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:2372
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Executes dropped EXE
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:2240
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffe14ed5d30,0x7ffe14ed5d40,0x7ffe14ed5d50
                7⤵
                • Executes dropped EXE
                PID:3036
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1712,i,10878477489225513696,11038199444955591604,262144 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1932 /prefetch:2
                7⤵
                • Executes dropped EXE
                PID:5892
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2052,i,13892256277869411081,1123011712881453206,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2372 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                PID:2876
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2548,i,2646138051620180341,7378708660817286164,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2564 /prefetch:13
                7⤵
                • Executes dropped EXE
                PID:472
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3276,i,5799867014072891444,17329866738623966602,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3264 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:1204
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3340,i,14540006033797881770,3005432493889493545,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3440 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6444
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3352,i,17358101492449636992,16775807191325793574,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3460 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6480
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3292,i,6318677474838866529,15585976943527968029,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3376 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6436
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3368,i,9732602246849033000,1609052362262420561,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3480 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6464
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3304,i,12288409451974632377,11719394839361661796,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3400 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6484
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3320,i,6679090652897972192,10873367328572762449,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3420 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6500
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4064,i,12361906213676051083,17432092422150459130,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4168 /prefetch:1
                7⤵
                  PID:6592
                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_gx_splash.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                  7⤵
                  • Modifies registry class
                  • Suspicious use of AdjustPrivilegeToken
                  PID:7068
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4820,i,15614811256226124479,15357480350452822160,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4836 /prefetch:9
                  7⤵
                  • Enumerates system info in registry
                  PID:6768
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4988,i,16969822104742832830,5229465436121695987,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5004 /prefetch:1
                  7⤵
                    PID:5480
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5280,i,17484681490416439446,2758760608713529817,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5296 /prefetch:1
                    7⤵
                    • Enumerates system info in registry
                    PID:6920
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5424,i,981634784490863979,3274139661402010477,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5444 /prefetch:1
                    7⤵
                      PID:6824
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6424,i,5136920801322378964,5403426151833713690,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6584 /prefetch:9
                      7⤵
                        PID:6452
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6928,i,5027242314485078433,11240345812478265747,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6992 /prefetch:9
                        7⤵
                        • Enumerates system info in registry
                        PID:3064
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6968,i,3052909273762657687,17773299617104997010,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6936 /prefetch:14
                        7⤵
                        • Enumerates system info in registry
                        PID:5756
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6932,i,1727626459448157808,9823606695398886193,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5264 /prefetch:14
                        7⤵
                          PID:6872
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6844,i,11336497858418480684,3064376214614358650,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6568 /prefetch:14
                          7⤵
                            PID:1372
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5824,i,8016869225532917802,4150806576894003907,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6788 /prefetch:14
                            7⤵
                              PID:6604
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7184,i,15987657001915640732,17141705638881609281,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7256 /prefetch:14
                              7⤵
                                PID:6244
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6524,i,7851065362828253533,12278873307273726127,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7132 /prefetch:14
                                7⤵
                                  PID:6156
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6816,i,4915214647755287620,15972452379875189610,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7224 /prefetch:14
                                  7⤵
                                    PID:3516
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5420,i,1988470701638250256,14991284574237046732,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7240 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:4520
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7624,i,6858638917407456168,9080341327544766182,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7220 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:6432
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7652,i,10137872386582270661,2064944957457730643,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7908 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:1464
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7660,i,18444459049078422046,10815862283289343278,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=7928 /prefetch:14
                                    7⤵
                                      PID:6992
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7192,i,14054259636861304662,15359256239732761302,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7276 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:6556
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7692,i,1142038017564425019,13575732858346808078,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8036 /prefetch:14
                                      7⤵
                                        PID:6284
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7644,i,12248085628718337640,2178355543154681759,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7868 /prefetch:14
                                        7⤵
                                          PID:1500
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8960,i,11356501889192675798,11250552111312428370,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8284 /prefetch:12
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:6040
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=8992,i,6490023397881373822,14943095882577596931,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9160 /prefetch:9
                                          7⤵
                                            PID:6328
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9180,i,2686841497413179621,9011719116125324226,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9292 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:1052
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9436,i,4840228296339089951,11753728575118235683,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9448 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:6552
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8968,i,1558394886489363650,8534186266256997932,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9132 /prefetch:14
                                            7⤵
                                              PID:6152
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                              7⤵
                                              • Reads the TCP/IP host and domain name from the registry
                                              • Enumerates system info in registry
                                              PID:7320
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x298,0x29c,0x2a0,0x280,0x2a4,0x7ff601e65598,0x7ff601e655a8,0x7ff601e655b8
                                                8⤵
                                                  PID:7552
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9708,i,7495112166349751873,6031340455499936998,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9968 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:7380
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9992,i,6037374325144045281,13703642633790823707,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10044 /prefetch:1
                                                7⤵
                                                  PID:7392
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9736,i,12111362563551826290,11147263053291164835,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9884 /prefetch:14
                                                  7⤵
                                                  • Enumerates system info in registry
                                                  PID:7664
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10528,i,4078037374829084093,6725703079030816194,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=9912 /prefetch:14
                                                  7⤵
                                                  • Enumerates system info in registry
                                                  PID:7672
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10784,i,1655323459193915091,7811568418945010898,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10752 /prefetch:14
                                                  7⤵
                                                    PID:7740
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=10024,i,570113698761267414,4177192096300039259,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=9972 /prefetch:1
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:1152
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7196,i,7149295618489640185,7854758942611994553,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=8868 /prefetch:14
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:7500
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8900,i,3731688620652945069,12187897659161672556,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=8876 /prefetch:14
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:7472
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7364,i,5665902236642402718,16854763037266429887,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=7356 /prefetch:14
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:7840
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4192,i,4736395399237609365,15313745137034442770,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=1704 /prefetch:14
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:7688
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4624,i,15449432742413864990,6705553555235889184,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=4580 /prefetch:14
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:7268
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3540,i,5264636763381264830,827643277276741121,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=3552 /prefetch:14
                                                    7⤵
                                                      PID:8188
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=3532,i,12941636696339790704,1073371920324470057,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=10020 /prefetch:9
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:7560
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3784,i,11315924265389723896,11903980611485686990,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=5584 /prefetch:14
                                                      7⤵
                                                        PID:7836
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7264,i,16146473391130593644,17777972051077630631,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9736 /prefetch:14
                                                        7⤵
                                                          PID:7928
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10672,i,17665663236532910686,1549125396741983353,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8752 /prefetch:14
                                                          7⤵
                                                          • Enumerates system info in registry
                                                          PID:6272
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=10548,i,4963937506736177174,11538746027905497597,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=7120 /prefetch:9
                                                          7⤵
                                                          • Enumerates system info in registry
                                                          PID:8032
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8832,i,435251238212178900,12509917101034551160,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=10760 /prefetch:14
                                                          7⤵
                                                            PID:7500
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8564,i,13971887765030106970,14049296662057776688,524288 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8528 /prefetch:14
                                                            7⤵
                                                            • Enumerates system info in registry
                                                            PID:8140
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=7664,i,18338319783948161586,5585906193606318416,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=10688 /prefetch:9
                                                            7⤵
                                                            • Enumerates system info in registry
                                                            PID:7048
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=4948,i,15181570252980861538,13242404283651490334,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=3864 /prefetch:9
                                                            7⤵
                                                              PID:7504
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=7664,i,428556881637459368,10344943423978876861,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=3812 /prefetch:9
                                                              7⤵
                                                              • Enumerates system info in registry
                                                              PID:6976
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=6916,i,7801550427674627381,9938025736135858174,2097152 --field-trial-handle=1940,i,9233147906380881902,8428640407205083356,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,10932467789331136930,13043074531023778904,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=7020 /prefetch:9
                                                              7⤵
                                                              • Enumerates system info in registry
                                                              PID:6816
                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                                        4⤵
                                                        • Executes dropped EXE
                                                        • Writes a Windows system DLL name to a user directory
                                                        • System Location Discovery: System Language Discovery
                                                        PID:2304
                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\assistant\assistant_installer.exe
                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\assistant\assistant_installer.exe" --version
                                                        4⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • System Location Discovery: System Language Discovery
                                                        • Enumerates system info in registry
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:5952
                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\assistant\assistant_installer.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x250,0x254,0x258,0x210,0x25c,0x9fc9cc,0x9fc9d8,0x9fc9e4
                                                          5⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • System Location Discovery: System Language Discovery
                                                          PID:5652
                                                • C:\Windows\system32\svchost.exe
                                                  C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                  1⤵
                                                    PID:3180
                                                  • C:\Windows\system32\wbem\unsecapp.exe
                                                    C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                    1⤵
                                                      PID:3716
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                      1⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Enumerates system info in registry
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:4704
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                                                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffe14ed5d30,0x7ffe14ed5d40,0x7ffe14ed5d50
                                                        2⤵
                                                        • Executes dropped EXE
                                                        PID:4680
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                      1⤵
                                                      • Reads the TCP/IP host and domain name from the registry
                                                      PID:7336
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x294,0x298,0x29c,0x27c,0x2a0,0x7ff601e65598,0x7ff601e655a8,0x7ff601e655b8
                                                        2⤵
                                                          PID:7092
                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                          2⤵
                                                            PID:7504
                                                        • C:\Windows\system32\svchost.exe
                                                          C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                          1⤵
                                                            PID:7472
                                                          • C:\Windows\system32\taskmgr.exe
                                                            "C:\Windows\system32\taskmgr.exe" /4
                                                            1⤵
                                                            • Checks SCSI registry key(s)
                                                            • Checks processor information in registry
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            • Suspicious use of FindShellTrayWindow
                                                            • Suspicious use of SendNotifyMessage
                                                            • Suspicious use of SetWindowsHookEx
                                                            PID:5732

                                                          Network

                                                                MITRE ATT&CK Enterprise v16

                                                                Reconnaissance

                                                                Resource Development

                                                                Initial Access

                                                                Execution

                                                                Persistence

                                                                Boot or Logon Autostart Execution

                                                                1
                                                                T1547

                                                                Registry Run Keys / Startup Folder

                                                                1
                                                                T1547.001

                                                                Event Triggered Execution

                                                                1
                                                                T1546

                                                                Component Object Model Hijacking

                                                                1
                                                                T1546.015

                                                                Hijack Execution Flow

                                                                1
                                                                T1574

                                                                DLL Search Order Hijacking

                                                                1
                                                                T1574.001

                                                                Privilege Escalation

                                                                Boot or Logon Autostart Execution

                                                                1
                                                                T1547

                                                                Registry Run Keys / Startup Folder

                                                                1
                                                                T1547.001

                                                                Event Triggered Execution

                                                                1
                                                                T1546

                                                                Component Object Model Hijacking

                                                                1
                                                                T1546.015

                                                                Hijack Execution Flow

                                                                1
                                                                T1574

                                                                DLL Search Order Hijacking

                                                                1
                                                                T1574.001

                                                                Defense Evasion

                                                                Hijack Execution Flow

                                                                1
                                                                T1574

                                                                DLL Search Order Hijacking

                                                                1
                                                                T1574.001

                                                                Masquerading

                                                                1
                                                                T1036

                                                                Match Legitimate Name or Location

                                                                1
                                                                T1036.005

                                                                Modify Registry

                                                                2
                                                                T1112

                                                                Credential Access

                                                                Credentials from Password Stores

                                                                1
                                                                T1555

                                                                Credentials from Web Browsers

                                                                1
                                                                T1555.003

                                                                Unsecured Credentials

                                                                1
                                                                T1552

                                                                Credentials In Files

                                                                1
                                                                T1552.001

                                                                Discovery

                                                                Browser Information Discovery

                                                                1
                                                                T1217

                                                                Peripheral Device Discovery

                                                                2
                                                                T1120

                                                                Query Registry

                                                                6
                                                                T1012

                                                                System Information Discovery

                                                                5
                                                                T1082

                                                                System Location Discovery

                                                                1
                                                                T1614

                                                                System Language Discovery

                                                                1
                                                                T1614.001

                                                                System Network Configuration Discovery

                                                                1
                                                                T1016

                                                                System Time Discovery

                                                                1
                                                                T1124

                                                                Lateral Movement

                                                                Collection

                                                                Data from Local System

                                                                1
                                                                T1005

                                                                Command and Control

                                                                Exfiltration

                                                                Impact

                                                                Replay Monitor

                                                                Loading Replay Monitor...

                                                                Downloads

                                                                E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                • Size 471B
                                                                • SHA256 f4c81da45da3889780c4e61596bdbc7544a9306861551a6634dae51963e36fd2
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                • Size 416B
                                                                • SHA256 b56ffd0445b5734289d47d0700e126135f980082e97bbe006d8176064ce19dec
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                data_0
                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                                                • Size 44KB
                                                                • SHA256 8e43322c0e2028de7ee46488803c755affba4390aaa33abdaef393b8475c2082
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                data_2
                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                                                • Size 8KB
                                                                • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                Submit Download

                                                                data_3
                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                                                • Size 8KB
                                                                • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                Submit Download

                                                                f_000001
                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                                • Size 163KB
                                                                • SHA256 10b9d3d0a1130c9a9680ab0927097257e4cbf0f494608335d89a8c00037df1b0
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                136.0.6008.52.manifest
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\136.0.6008.52.manifest
                                                                • Size 225B
                                                                • SHA256 e4932cf87759845a5f1bdd3199ae94d5896f4ce58f8b6b9fa24942f90a7fa7f9
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-100.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-100.png
                                                                • Size 1KB
                                                                • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-100_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-100_contrast-white.png
                                                                • Size 1KB
                                                                • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-140.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-140.png
                                                                • Size 1KB
                                                                • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-140_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-140_contrast-white.png
                                                                • Size 1KB
                                                                • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-180.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-180.png
                                                                • Size 1KB
                                                                • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-180_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-180_contrast-white.png
                                                                • Size 1KB
                                                                • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-80.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-80.png
                                                                • Size 827B
                                                                • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-80_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-80_contrast-white.png
                                                                • Size 799B
                                                                • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-100.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-100.png
                                                                • Size 781B
                                                                • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-100_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-100_contrast-white.png
                                                                • Size 752B
                                                                • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-140.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-140.png
                                                                • Size 991B
                                                                • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-140_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-140_contrast-white.png
                                                                • Size 865B
                                                                • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-180.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-180.png
                                                                • Size 1KB
                                                                • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-180_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-180_contrast-white.png
                                                                • Size 1KB
                                                                • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-80.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-80.png
                                                                • Size 590B
                                                                • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-80_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-80_contrast-white.png
                                                                • Size 519B
                                                                • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                assistant_package
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\assistant_package
                                                                • Size 3.6MB
                                                                • SHA256 fbbc603017d6361fbf735e11ba816cceadad30328bb2ede9ecee73f2b56bd59c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                d3dcompiler_47.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\d3dcompiler_47.dll
                                                                • Size 4.5MB
                                                                • SHA256 4b87ecdd1bfd4b8143452d107d9ea7a917f7e03c1f517b9b95cbae5ca3999069
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                dxcompiler.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\dxcompiler.dll
                                                                • Size 24.6MB
                                                                • SHA256 b38658d0c434edc2d13247956a6aafd1438851f959ad61b5f9e0c1bba6bd2d9f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                dxil.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\dxil.dll
                                                                • Size 1.5MB
                                                                • SHA256 cdb874862b72cfcdb6dbdca698b462e1546c7fc9b215151c73c8f4681ad6c799
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                files_list
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\files_list
                                                                • Size 6KB
                                                                • SHA256 0c087ff2c9b81050f0e8940371993a46a90267bdd94af7b5152787245dcb2742
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                headless_command_resources.pak
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\headless_command_resources.pak
                                                                • Size 2KB
                                                                • SHA256 90e398ef08a0178d1efd373addb5070a551011be8b9d27fcc2f234e430a8ad98
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                icudtl.dat
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\icudtl.dat
                                                                • Size 10.4MB
                                                                • SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                installer.exe
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe
                                                                • Size 8.3MB
                                                                • SHA256 07615e6bf94841a360802ceb411b81e8329dd21b57c2045335b99c36c007f5d8
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                installer_helper_64.exe
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer_helper_64.exe
                                                                • Size 601KB
                                                                • SHA256 3ab73bfb35ec3d7c20511f2c2e9ca60ef7514f15641209705fa9b8058de4c190
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                libEGL.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\libEGL.dll
                                                                • Size 460KB
                                                                • SHA256 628f6a6eb054218f3357381d42ebf63e008316e564e1695ebd2925b7c6d050eb
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                libGLESv2.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\libGLESv2.dll
                                                                • Size 460KB
                                                                • SHA256 6ea449f57a607ce9d6186bca8a16514c52ee112d94e3af2e69beb904b54593cd
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                bg.pak
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\bg.pak
                                                                • Size 1021KB
                                                                • SHA256 7958eea00f4ef14a9b3a9021b87ae4cdace36ca171d6487e09427c980925066a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                bn.pak
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\bn.pak
                                                                • Size 1.3MB
                                                                • SHA256 6307636ac68ea9742dba9dcafd1a6cba2c086be46c25fc10c9392a083f67a763
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ca.pak
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\ca.pak
                                                                • Size 642KB
                                                                • SHA256 0cb115bf30541172098fb7a542713d2a86607e1c9f6c36e459015f0b2cc2876c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                cs.pak
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\cs.pak
                                                                • Size 641KB
                                                                • SHA256 b8a82ad00c2a033704cf0a9b6a20d4c48f61cab7d6fafd60d5ed7120946d0a64
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                da.pak
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\da.pak
                                                                • Size 590KB
                                                                • SHA256 1d767d2231eeaf346ee7d5eafceaef5884df41666cafa057ec9784da278a75c1
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                de.pak
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\de.pak
                                                                • Size 639KB
                                                                • SHA256 ed7fd31b1e80c5de13e985a0c15becf8c99f6bc153891c853e144a05b1bf603f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                el.pak
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\el.pak
                                                                • Size 1.1MB
                                                                • SHA256 fa8f4b42f21b74e386c88f66aa6802076e78da4e442fd74d875cbccd6af00419
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                installer_prefs.json
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                • Size 1KB
                                                                • SHA256 b321bc9136d3b7a2715acdf41cd8c77526875d8e875cc1208c42ed006f048fa0
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Opera Browser.lnk
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\Opera Browser.lnk
                                                                • Size 1KB
                                                                • SHA256 98573f64b31b5c28c22bc239d16974bec5d7067ca52969bb32fff52b92296a49
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                additional_file0.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\additional_file0.tmp
                                                                • Size 2.9MB
                                                                • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                assistant_installer.exe
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\assistant\assistant_installer.exe
                                                                • Size 2.4MB
                                                                • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                dbgcore.DLL
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\assistant\dbgcore.DLL
                                                                • Size 196KB
                                                                • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                dbghelp.dll
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\assistant\dbghelp.dll
                                                                • Size 1.8MB
                                                                • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                installer_prefs_include.json
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\installer_prefs_include.json
                                                                • Size 224B
                                                                • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                installer_prefs_include.json
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\installer_prefs_include.json
                                                                • Size 239B
                                                                • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                installer_prefs_include.json
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\ac16b08d-1ffd-4a65-8c83-81e9cff0b061 Opera Installer Temp\opera_package_202609300411321\installer_prefs_include.json
                                                                • Size 1KB
                                                                • SHA256 493c0992d3b0e3b7c17e6feb0fe922c823fa4e951d60ad26ac00d01fd8ca13d1
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                installer.exe
                                                                • Path C:\Users\Admin\AppData\Local\Temp\7zS08EC1659\installer.exe
                                                                • Size 8.3MB
                                                                • SHA256 a98e228f9d31c84cec88654b9fbf48e8bbec816fd1ab935572f448fd997c2c31
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                OpInst.exe
                                                                • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                                • Size 3.1MB
                                                                • SHA256 06396d75bef31f0d891b5e8ae582940e63d4d7e34ae09285c92246f38ae677d9
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                bg.png
                                                                • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                                • Size 224KB
                                                                • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Icon_Light_Neutral.png
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2240_457370746\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                • Size 2KB
                                                                • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                messages.json
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2416_2073356477\CRX_INSTALL\_locales\en\messages.json
                                                                • Size 401B
                                                                • SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                favicon_opera_one.png
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5764_511692205\CRX_INSTALL\favicon_opera_one.png
                                                                • Size 2KB
                                                                • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                settings.dat
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                • Size 40B
                                                                • SHA256 d8b2097e81500057c609cb118ebbc8c9be4788b95edd2287b7c60b30e5c75f73
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                23cb0815-ea99-4f2e-afc3-ed819092a1a4.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\23cb0815-ea99-4f2e-afc3-ed819092a1a4.tmp
                                                                • Size 203B
                                                                • SHA256 825276f633c55fd42930e175de6888aa7cf18915988c59a8001abc9365a8448a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                35389890-acdc-445e-8f60-253bf3282817.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\35389890-acdc-445e-8f60-253bf3282817.tmp
                                                                • Size 203B
                                                                • SHA256 89c4a181c646cc4165d105a00a3d6331406c4ff282279da5df7e501a46c82e6c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                8f2816b0-cd34-4e5c-ad0e-b8e3391fa45c.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\8f2816b0-cd34-4e5c-ad0e-b8e3391fa45c.tmp
                                                                • Size 171B
                                                                • SHA256 11417a20220ff85691068f6c3b9fbf8b0bb141a80378e12b98b1f60f080497d8
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                BookmarkMergedSurfaceOrderinga971125e-9978-48fd-8982-f2f0ca9ef2b3.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrderinga971125e-9978-48fd-8982-f2f0ca9ef2b3.tmp
                                                                • Size 6B
                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                Bookmarks
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                • Size 34KB
                                                                • SHA256 cb4cc635a6a4d184a5d8de74916e969db6a7dd57ba0a6c1beedd82c3c6a037d2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                BookmarksExtras
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                • Size 197KB
                                                                • SHA256 9ae3beea5705490203556c42ebb2568fec6fc435b3315cd33956e872a898344b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                BookmarksExtrase37f7de1-a552-42a6-9968-d73863447966.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtrase37f7de1-a552-42a6-9968-d73863447966.tmp
                                                                • Size 2B
                                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                7fbea367-acd5-4146-93f9-6bc7bae7de41.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\7fbea367-acd5-4146-93f9-6bc7bae7de41.tmp
                                                                • Size 48B
                                                                • SHA256 e9c56843a93acc4cf311c2a116ee6f189bd7e0e3d5996567fbf1d3a386067fa6
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                • Size 336B
                                                                • SHA256 40ad8f9fea11608d95f835630b39a16520fe5b8bcd35b998c74a0bbb0a9c98a8
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                • Size 336B
                                                                • SHA256 1239f8a084b685e66b05247cadc99a1344108c39b62c4e8fe704fd4aa3cd5f10
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                • Size 744B
                                                                • SHA256 1a63405d75f0fe0c7bafa78f3d64eca0acf0c4c69960bbcaacaf26576ac5839f
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                • Size 744B
                                                                • SHA256 5f8f6033bef6e060af6bfb2c23518e1a86cc2649828e6cac5edc0d11b782f626
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                CURRENT
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\CURRENT
                                                                • Size 16B
                                                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                MANIFEST-000001
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Scripts\MANIFEST-000001
                                                                • Size 41B
                                                                • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                preview.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\bckiheihmdiaaoadimffbjbjafkoooaj\1.0.4_0\wallpaper\preview.png
                                                                • Size 464KB
                                                                • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                main.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                                                • Size 47KB
                                                                • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                logo_128.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_128.png
                                                                • Size 7KB
                                                                • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                logo_16.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_16.png
                                                                • Size 653B
                                                                • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                logo_32.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_32.png
                                                                • Size 1KB
                                                                • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                logo_48.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_48.png
                                                                • Size 2KB
                                                                • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                logo_64.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_64.png
                                                                • Size 2KB
                                                                • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                service-worker-loader.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                                                • Size 49B
                                                                • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                favicon_opera_one.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\favicon_opera_one.png
                                                                • Size 2KB
                                                                • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                reader_mode.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\reader_mode.js
                                                                • Size 112KB
                                                                • SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                spotify_frame_interceptor.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\spotify_frame_interceptor.js
                                                                • Size 5KB
                                                                • SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                background.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                                                • Size 87KB
                                                                • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Icon_Light_Neutral.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                                                • Size 2KB
                                                                • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                popup.js.LICENSE.txt
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\popup.js.LICENSE.txt
                                                                • Size 1KB
                                                                • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                rules.json
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                                                • Size 839B
                                                                • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                MANIFEST-000001
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\IndexedDB\chrome-extension_jifbgnmbgbdiedhdecealmlgmekpagde_0.indexeddb.leveldb\MANIFEST-000001
                                                                • Size 23B
                                                                • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                0702c4af-c44f-4627-9606-fce77335a6fd.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\0702c4af-c44f-4627-9606-fce77335a6fd.tmp
                                                                • Size 27KB
                                                                • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                317bbe50-eaf5-4e29-bf5e-7f54cfbb22d8.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\317bbe50-eaf5-4e29-bf5e-7f54cfbb22d8.tmp
                                                                • Size 27KB
                                                                • SHA256 3c5dfa15d581def92644fe4db0be64e2884f7f7ad01ec81671acdd44c70efcd4
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                9af0635b-f6da-4490-a67a-a25126fa07de.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\9af0635b-f6da-4490-a67a-a25126fa07de.tmp
                                                                • Size 27KB
                                                                • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                af311e9b-4e83-482b-bf62-3972b84a19a0.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\af311e9b-4e83-482b-bf62-3972b84a19a0.tmp
                                                                • Size 27KB
                                                                • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                bd4dda42-8508-4773-88d4-e6c88dd83a4d.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\bd4dda42-8508-4773-88d4-e6c88dd83a4d.tmp
                                                                • Size 27KB
                                                                • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                dad74c8e-09e4-4dc2-9388-f799269f025e.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\dad74c8e-09e4-4dc2-9388-f799269f025e.tmp
                                                                • Size 27KB
                                                                • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Network Persistent State
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                • Size 61B
                                                                • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Network Persistent Statea02b203f-aa33-45ef-9bfb-75fd21ec9692.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent Statea02b203f-aa33-45ef-9bfb-75fd21ec9692.tmp
                                                                • Size 1KB
                                                                • SHA256 7696eee7459aa31fb6ecff70757fe53180e52b4c3f16be64c682ee5771e48325
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Network Persistent Statef236e465-fa54-4f6b-8346-5d020583dd57.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent Statef236e465-fa54-4f6b-8346-5d020583dd57.tmp
                                                                • Size 111B
                                                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                SCT Auditing Pending Reports0c7ccfd7-a206-4feb-bf4f-f886a2b7b9c6.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports0c7ccfd7-a206-4feb-bf4f-f886a2b7b9c6.tmp
                                                                • Size 2B
                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                Preferences
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                • Size 11KB
                                                                • SHA256 f2f5fbf9bf69cb87bf3ad22cc4d0988360448b5e19c8be97c70eb8913096f61c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Preferences
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                • Size 15KB
                                                                • SHA256 9313cd3af9694b3a67c9a4555d35405d11e44e08c451a61237f42cd16123d67f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Preferences
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                • Size 15KB
                                                                • SHA256 eb9cefd46e3d8a1469097a6840f0db17fb070c083f2eb9c46ae978864c2d2992
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Preferences
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                • Size 16KB
                                                                • SHA256 f62ab0ec327505f38a0054779a6715efae3c5ffaa1c56fdf27199af21bda6b12
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Preferences1c723b16-ec7d-4259-9972-91f6572d9715.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences1c723b16-ec7d-4259-9972-91f6572d9715.tmp
                                                                • Size 10KB
                                                                • SHA256 03c5a3be3accc3136e00f36de6d00c143c0b83a20ee25d4f54c4a2ea9bbbc954
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Secure Preferences
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                • Size 112KB
                                                                • SHA256 a930f85741b67c633effe974497db90741bb3dd292a14b20be709e96024650fc
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Secure Preferences
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                • Size 85KB
                                                                • SHA256 742dd7454ded8228e076a66aaccc826ea7fdcf5e102335ffce559fccfdca0d09
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Secure Preferences
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                • Size 85KB
                                                                • SHA256 7c6a8399035e4058a2eb9563fe7b03fc64c1c23178dd724826da813c7288e5e9
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                fc68ca2d-931a-4b76-9a0b-8fb6e9e7c4d2.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\fc68ca2d-931a-4b76-9a0b-8fb6e9e7c4d2.tmp
                                                                • Size 72B
                                                                • SHA256 9dccc9999b7883f992b456893d9f3eb52f7b5f3cbb8800f1dee58344c22598f0
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                • Size 120B
                                                                • SHA256 8bba4b195443b7f980a0f4040f4bf8e70f6559556b17b58aad9ecbc3f97983fb
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                • Size 216B
                                                                • SHA256 835ae4b05f2ec9cfec4df44b5afc2b89b63c054b4e4df8c50ebd0ea15f967762
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                • Size 360B
                                                                • SHA256 8bd9a2729014d99ef0083de4ff1b08d144facb138b0935fcfdd93ba07974896a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                18d90592-ddcd-4502-acb3-07893bcf6c12.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\18d90592-ddcd-4502-acb3-07893bcf6c12.tmp
                                                                • Size 381B
                                                                • SHA256 820f081b906d7ae1a48e7411e681f49825e6272b0a0cd12b2fc3c3c7aad0ac3d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                4bfb8b23-8ae8-41fd-89af-cb587bcacebc.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\4bfb8b23-8ae8-41fd-89af-cb587bcacebc.tmp
                                                                • Size 381B
                                                                • SHA256 963f1cdce1ef59d0425650c45f12c2a0304d21aaa4aa7b85893a632c4ffeffc4
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                c0484c07-da5f-4800-8ba9-ad02f2eff588.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\c0484c07-da5f-4800-8ba9-ad02f2eff588.tmp
                                                                • Size 381B
                                                                • SHA256 00b3444456227cebdd937250cd691077832790955bda7495ce9244dce5b657a9
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_296ec305-cbcc-430d-bde6-ed98fa06bd23.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_296ec305-cbcc-430d-bde6-ed98fa06bd23.raw
                                                                • Size 637B
                                                                • SHA256 ccd257c954abf332bb49cb45900cc6d88d6b97ef5a0c5d16b5e73296ddb9290c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_296ec305-cbcc-430d-bde6-ed98fa06bd23.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_296ec305-cbcc-430d-bde6-ed98fa06bd23.raw
                                                                • Size 845B
                                                                • SHA256 5204f7717dae7bcd43c8552649d8b74223f08b8ccf0cbcf37ef268d1930de3ee
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_296ec305-cbcc-430d-bde6-ed98fa06bd23.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_296ec305-cbcc-430d-bde6-ed98fa06bd23.raw
                                                                • Size 493B
                                                                • SHA256 352b260dbd6a6c4362cc01a4442fd7377714f61957d063d0f68682dfeede12b8
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_296ec305-cbcc-430d-bde6-ed98fa06bd23.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_296ec305-cbcc-430d-bde6-ed98fa06bd23.raw
                                                                • Size 621B
                                                                • SHA256 59f3cb0837bec39488776710f737681c488afaba089ca66da5a002a069237a65
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_296ec305-cbcc-430d-bde6-ed98fa06bd23.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_296ec305-cbcc-430d-bde6-ed98fa06bd23.raw
                                                                • Size 637B
                                                                • SHA256 cff9322223544446878b0735fd0868a2c7f84cfa36b47568d41ef3fc572f9735
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_296ec305-cbcc-430d-bde6-ed98fa06bd23.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_296ec305-cbcc-430d-bde6-ed98fa06bd23.raw
                                                                • Size 637B
                                                                • SHA256 26bd42d3cee11002378d262aed36c527d55edb94b5d5ed005c5e34a64d649e00
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_296ec305-cbcc-430d-bde6-ed98fa06bd23.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_296ec305-cbcc-430d-bde6-ed98fa06bd23.raw
                                                                • Size 797B
                                                                • SHA256 b00790a398e07df6843e3d5c75cdafc0770620e6204a420f2b15353342de4707
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Size 1KB
                                                                • SHA256 805955d3d941dfba90dca63f37108313daf9e59f2bbea76d800ee9b4a21ae132
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Size 1KB
                                                                • SHA256 db0adf6ba2ca324f2739b4271f2ae72cf9a5e431209f975a6649cafdce4193d5
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Size 1KB
                                                                • SHA256 841afb28afe554fdee63cd5a39345382ce34e63654bd433f5f86580718daf5ed
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Size 493B
                                                                • SHA256 a0413e9c1c624590e30035ca24ed47aa0eb9e5ec31de03ce6fb9f53284aa2f7c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Size 605B
                                                                • SHA256 57e230b7d62711a7cc59ebcba3447f315843e3a931fba6b2aa3d3c8edc548faa
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Size 765B
                                                                • SHA256 2262219dd54009eb22588da3911de027f07c855ccfe2a5c36b0ae1a744570905
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Size 781B
                                                                • SHA256 70071e2edc5c1529a88cf5f13a4c3ad69f76e192b3bb3551c6b51ae20016698c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Size 797B
                                                                • SHA256 f6acf91f85db0d1eafae57c7e8c212309ac6a9e6fcc53f79d26c6c9e71d181ed
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Size 957B
                                                                • SHA256 7c5d4c43b511c50c3fe7969db80e8eadbf9cc49a5fd55d8d1d24c42e79e1f33b
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Size 1KB
                                                                • SHA256 21b291d488a74ecb9118e0a8e9a4491cee98e5c2d84b7054449692275a3cef14
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a7b92ca0-3a4d-4aa4-9050-b8535e2ef00e.raw
                                                                • Size 1KB
                                                                • SHA256 0d846d73701f8032dffbab97163ac130e11f0847080260b3798b55ac419db0fe
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 11KB
                                                                • SHA256 14db3399627687e3b63bae195e5a217c5137be9c2040d8890cbc515ced1a9f35
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 11KB
                                                                • SHA256 49587cdffaeac1d92305aa9b5e8724c2e43d2fb2b01baff831347d4ed89de216
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 fa1f869ced6cbb1034d4bfd114f88037aa272db22ff09f6ccaa289c11da9c465
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 0ab3125aecbc69ee06a402f05fb3db038f09243f80e492436e69e9b5024834c5
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 f73ed7042a897b6bcb014ae46b1d5be8ac954efb136b84e56d2642869223da5e
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 10KB
                                                                • SHA256 b4418f280251fcb10604403e988fefb9462f76804bf279fa841f2b792ccdb407
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 10KB
                                                                • SHA256 4bf81a674dd2985e66537661493ce10e505a48e4addb39ca47162098c8b800e1
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 10KB
                                                                • SHA256 49924e975f8adffa453f99fe52b7c1815b61cb8763cb5e4b8b4c72377543c39d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 10KB
                                                                • SHA256 5f64fa15020ba345405398947fd8abfe3334fb8a27d49b829d698240d3eb2c6d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 10KB
                                                                • SHA256 eb83096b3ce31b62c5fd6496f5fd1c5d2513b292ce591d1a154de8ad734e5d31
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 10KB
                                                                • SHA256 026dc9e93e2d30b416ee062e34a7e6ed0eeb6badaba8b25825b9670b0a0dc5fb
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 9a2bd39a0fbaea99b0ae51ee55e7c010de6965e3babb21d84c70aefa11ca1a3a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 3b6f5d55f32f30c8bd03f82b223a03b610f7fe222ecda66ea7416d0141a2aba5
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 ad2f601d6e639e30f50cf945a2129f4a9c771bf84f988ceb592dafd5d89c065e
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 c730ff021c2b9b7071fe225f0cad7541156942ea8dfcf8e22351cbd531eefe7c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 8edb2d9651595e4cf8f759f7f2d517b6a248262765bb5cbff80af1af35f5b2ba
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 04b28b0b808f443032f8e13868f030f28a7958ea8cd0ea0cee9311144e45d3d6
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 8ecc0244b39e00655df4dbd4f6da36349b00a9a76eae4994ba126feab450843a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 11KB
                                                                • SHA256 1a3e0e48b1e71cc845f2b8ac1f06375732c1c004071c9dc4d38bdd981f0657f4
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 3aa34fc0a3c98591585bf899bbd74dbec2fb97424987f707326d148514a94159
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 dae4817ad2c72e0e12f261881001f0e3eca8dca236ac268ba19bbd023340f480
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 a8960a3d5fa9c92981e4789359ed190f017e5411fa6a72779d98eed2c82c1f01
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 1e4c5df1607e9ae1484da65910b148004b7f6270bb76c7dd82c4267b45f67ce5
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 11KB
                                                                • SHA256 9840a5cffef1022cdb86885fb01c99940d386b250a4e3096bb34900b8d05dd5d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 11KB
                                                                • SHA256 766933b5dd08292e07df3e725fd795349bda708703ae36bad044e7182dde9aec
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 91cbcc931f9e056b2838b3bf63dbd44d937b1a5b5f7aaa0e5f7552b922174f63
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 4feb6c1148eb2f970dee47af119629a49fdabec1cf0338213889d1248ec7c852
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 14KB
                                                                • SHA256 c6fad50985615ede508f586e75117b36217ce8ac77cf07b8ebc02614b0dfff8e
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 144024cf55075bd6cd8415c2aa85f6922f483a61c97c4a6eed1d7d866c3e2718
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 c4e3807ed111f84e816a74534d7b5114a2e1e13217ff061317fcd1644b2bd18a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 12KB
                                                                • SHA256 4a5113ab35f2bf407f6ea2cd81ecaa696201c4bf8baa29e1b06a09fc87ce524a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 12KB
                                                                • SHA256 6a7742476678d5b0c46a0d787fd1e4e77ed151ad1b280773520f033dcb9c6d7f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 1KB
                                                                • SHA256 fcf80be9bbc512715ebc85c1d063527969a3bd26b721a298b14f8ec99c13cc51
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 1KB
                                                                • SHA256 f95b0c01b1b2e7a444075e94f2abf502a1b8201b631f70410def1092a6b0bc49
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 6KB
                                                                • SHA256 ce8984ebb01e38db1b48fff6b4954f2831f5c5dac60e8920b3c2b70bba196f06
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 faeb3213cc3fc5b0604a8aa1ff2666a0e3d878e43af015d4e9a418f7138cd1b6
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 02a00d60afc8a02c72f57201a25c1190426b443f3377d8d6de234b8c75e14965
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 1981eeaaa1b839eac59304d90d1d9b717b4a5e5200f6be9accfb89326e48f0ec
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 49a7225d930fd74733c9c8f0f5614f09396f5f5d53eb33bf68864450a2ae2857
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 60f0e90327b6642fd03fc6c49691596e242a28c508ee32ca7384de52052d3dcd
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 4560f33c6f7338cd35a9597b1226577abd2994578c60f109dc38cfee6df3ee11
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 12KB
                                                                • SHA256 636beae626f4595b1a629114e6f61209551ac2c32370e4b9e5fd9bc74b09d53e
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 50f7609e6a11f75abb1d16a3965681384366a82895622429ae0cd928b2f06171
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 57d076b9eca78954d231f2d942cf7ec39a4d7ddb38dce5904c113a8bd847ed47
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 694cf0564479c61f24cce69dea43087f5a2e4ab4177a26437c24c8336639d391
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 8c8ea394449b9a1e1bb01ecf4bd5ab3235eabeaf97bd6ecae8f37df072e16b7c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 14KB
                                                                • SHA256 2d89e9eff52e61793bc2397ca90c68b3a200ddeeb97beade7a12349a6030ec22
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 621B
                                                                • SHA256 707e946969f6764a07ed3393f831897c129f63f89ab65966795c2c0c2e7acb5f
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 1KB
                                                                • SHA256 76a343d969fc93a503b4eab6430c7c6085e2dda1fa3c2dfb680e344466a93683
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 1KB
                                                                • SHA256 08d447521636041cf845e0656deff5083de1b746a8e463a5db1ac542378b07da
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 1KB
                                                                • SHA256 6365d3f275fbaad3256413e99ae7fa2111ce8446e1d4d3afb9db4704aecd1cc5
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 8KB
                                                                • SHA256 87ed121510abf8750520f8d9a6be285217824cec1e2419270c5cee165eba3d14
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 6KB
                                                                • SHA256 bc67e3549a7d916de47d03d326f083b91a56b6cb8581022d84cd9b7c49ed8012
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 10KB
                                                                • SHA256 4d3e21ee226f372e40161bfabecd6d3b61c731b7d3eec42ae1daf5ad72334479
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 35232867ec0ff741c97af08aacc35b6a2d7f4421545e10c0cbd90be4bd5b466d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 925B
                                                                • SHA256 2c1bff00a812675ec4524c4e736c5473c01959237cf2b663d23c5c0c45b7fdbe
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 8KB
                                                                • SHA256 2d731f9f36ba5bdcd550632363d434b692c59438da8cf37282c79f511c778212
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 1KB
                                                                • SHA256 5d53cee9f9c1408ba4decd6280844c5ca00c7d43d23f89377bcc6fa00043f6a2
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 1KB
                                                                • SHA256 239d52cf237a2a8b2375f91f5db2dbf61d140a4f5c15d1eccc9028a0425754ba
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 1KB
                                                                • SHA256 2a669c45560f84a06f3b1cf91908b0c0943f933119da3347b494d3e55c9e8049
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 8KB
                                                                • SHA256 126c9d076b56ca1e5337c580f8a4d0916dbd22f8e5f61101eb24f5d7415d5f68
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 11KB
                                                                • SHA256 f6dcf3245f2c946ab707ae3425b4c1fd221d1bf74b9b18069c7faad9da965361
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 8d41ea658457475c9f18af49d935d12e1c9c07517efc79d798bdccf7f967044f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 32c69cb0b90a1006cd952b7eccc396a681761a15c8e83c302ea8da789e99637b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 9531ae0da4fdd9cd5ec092f9ea337d37c062174f6a6e395187d9027eeb9b1dee
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 11KB
                                                                • SHA256 ae9265a360f63fd3e22a8a03e7e65936d62daff1c90053c06a4ddb03614e9829
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 7KB
                                                                • SHA256 cf2a84936a31b099a659627fcae245f6e998a840d803b00ad26bae8354477772
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 973B
                                                                • SHA256 0e1e942d0fff65a0548fd498c1b12c42242d52aba87e91c7e6724c6ffe756628
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 8KB
                                                                • SHA256 f50d73ffbfbbe0c64e2e2ab621d18e93d3a1faf92cca6b75cab7cc814c23f9e7
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 8KB
                                                                • SHA256 533b42ff4140e0f43b52014a6dab713351d3d6788d71409cf908c82b11d06fc5
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 14KB
                                                                • SHA256 ccf2865e48c187682b1438f2f027396124a858fb73c19f174c26838d4e42ddb7
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 493B
                                                                • SHA256 1180610e77e02b0e202c243f22f8c9ecb2a658c6f54f8ed64e6d83350aa7dbdc
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 8a2e8ae1d089d24ee9584021f44056f56bc538b48ec57feb2fc48ffdc04e9130
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 10KB
                                                                • SHA256 69a6f566c1708ae4627a81ee0dc86f855e8045e463605542ef2b3b7bcec6621d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 8KB
                                                                • SHA256 d98e90859672a8669d281a079b57dc474969b260dc93d0f46b9c15a6f369738e
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 8KB
                                                                • SHA256 ce5cbb2e8a9dafa020316424b3d7a76c5205517079e4acb09d442556fe97986c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 1KB
                                                                • SHA256 305333aa8f1847172e5b88ca0df9ade915e74fd82751334b5ded7232462be8b3
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 5924eb522b88f94aa252badd9e8fe8ad2c86b910168fc87688cef535b98cc944
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 12KB
                                                                • SHA256 5af3fd6e0d508ba8f1d518821a2685700cefb823bdf644caeb3f63887b72e0bd
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 b0b4310f6cf629ab79edecaa524db14e51a5e0af7655369f3e4d5adfb09f5f89
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 b8ae47a87372260f2f108099e1a97cf8e311f4ff82c4c5d8d5e2a0731548d1f3
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 733B
                                                                • SHA256 80783efed00da1c82053ee8ddab731982c42d7796088c2d85d86ae3a508b4cc5
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 7KB
                                                                • SHA256 ad505da5d65d208bde761371eed110c8ddfcecc86221c32365e24e68f3a97de0
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 12KB
                                                                • SHA256 e90553ccd85ff62682c18c5de04811fb37bd2bb74a6c6272245eaef8dc24565f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 c058964f8535eb803ad576f7fd8248183c0cd94c30dcbcaac65a22ace542e928
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 a02cf6bc108057c8674db1ee32b0d8d46f944e1d9a586acd995877c2c4fc7fef
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 14KB
                                                                • SHA256 863a58104490479a37aa956b99cbfd57afe07596f9f2629af8748a738f8bda41
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 12KB
                                                                • SHA256 7b03562cdeb69b84a5b935373e900da4fff7ef594e3e1a3b9f372a90938fd6a9
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 3646650436ed26a1b35ecba8361984b78c61c52dfec2b8807bedcba7259fa50f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 8KB
                                                                • SHA256 65119aff2567601e40107bd89c0a9d731aa3ac776e0758a1ed08a32ba57b8b8c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 81d9659c4ca8fbf0c592a23ae15c9e1132749548150ec3483ca1f881f6c6c9c9
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 10KB
                                                                • SHA256 1a0c4f2599cae56dd60b6791df68f5b2d0128688d34e338a00625fe78f561427
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 10KB
                                                                • SHA256 044346e36c25bd606aa00ef483326527448f04bb2eb0d4eb9f5d0be118df8bef
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 9KB
                                                                • SHA256 9da273f215d26987b6474155aaf5d17a8ead9ebf0c2bd2f4e2b5abe44d547bd4
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 577424e6faffce3e0765c6bde2f63e42ff2e4b0f103d02c4687e8089630bc838
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 70475fed6c53711826c4db8f8ce96efde1e5f8a6256106eaaad613dd667d506f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 3022a7ed1ca54fd14a5dca6f10de7ff6c1a748a882f21e562926c688fc03e354
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 6239631b8a97349f85055873cdb08bb822965ce13189035b41067775cd3b0b35
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 dd74a479cf5d9fa4f0c76c7f83f6e04754c9e54cf67f020600d80145c9fd07bd
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 f2e1e38d293988f676346cc30212aab1c30845efafb746ae46e9a2f78052c7d3
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 d70b560f8ade799670209de09bbc4386513c4cef0bb5431b26b87281f9691b3d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c552328c-8161-49cf-9d21-c05cc9876ac8.raw
                                                                • Size 13KB
                                                                • SHA256 c8bff90d34119e48f6b6d4e38d0a7b0af79ed212404acb1381cf9466edad70b6
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ssdfp2240.0.2131395191
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.0.2131395191
                                                                • Size 1KB
                                                                • SHA256 cb03f9e269255f64b20ab20ba1b9ab20d23f09e8d24e38e5b7d3ea8ee1438578
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.0.2131395191
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.0.2131395191
                                                                • Size 2KB
                                                                • SHA256 29b3aa47adab21a34778cac9f5d547e73af2c788d7302df5b3215be1b83fb48f
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.0.2131395191
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.0.2131395191
                                                                • Size 2KB
                                                                • SHA256 b0cbc2b48c69bd0bb26dd30abc61b5dbff6d1ed7b26dd86a6c3046ca66d7bb4e
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.0.2131395191
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.0.2131395191
                                                                • Size 2KB
                                                                • SHA256 e7a03e2a5590e171ce162f68f3fde6e40da6a78518ea52464bd69b3514e785e8
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.0.2131395191
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.0.2131395191
                                                                • Size 2KB
                                                                • SHA256 b96172b964992b677c1786eeb6fecddb1359d5df514246ea3dce3393bcf33cf8
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.0.2131395191
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.0.2131395191
                                                                • Size 2KB
                                                                • SHA256 30f5f64148919bbe6884e809f19dc05a2e5bc62016bfcdebe753d6516221929a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.0.2131395191
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.0.2131395191
                                                                • Size 2KB
                                                                • SHA256 ffa359d7142d5d8df68b749c7be4f0973c3dc3857ca4c33884dd5ea4686e5899
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.0.2131395191
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.0.2131395191
                                                                • Size 2KB
                                                                • SHA256 f44b6984c4730ed54ed196619fa1c7b3ebd46d5903f483555750be9af785b4ab
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.0.2131395191
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.0.2131395191
                                                                • Size 2KB
                                                                • SHA256 8f4870e5393a297005204b5dbe5d1e8e848333a2069e55b4ff2bf4049b1828dd
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.0.2131395191
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.0.2131395191
                                                                • Size 371B
                                                                • SHA256 de72fa0c7985081dab2ad4f96bd3f68089ec649c110e9a0dbdf8967b6d5e46e4
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.0.2131395191
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.0.2131395191
                                                                • Size 469B
                                                                • SHA256 4c71a398e27819ae5ce5fa2284cd1c18cd7f61054fba4e10ebda0dbc5bde7c12
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.0.2131395191d8a18e61-acc9-4861-85a9-e1b835187838.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.0.2131395191d8a18e61-acc9-4861-85a9-e1b835187838.tmp
                                                                • Size 531B
                                                                • SHA256 54475008bd01527daf74ae5fc9d75ddc1ca7376a4eb80c0b16e6f45a17e6089b
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 1e1be5559b684551a91403ec777109ce4ea5465260d80d7024a850a0cd46a4d1
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1003B
                                                                • SHA256 3225f9bf473939ad7372c0b6ad923bbf0cc89db13006373aaa1bc80b177a4442
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 875bad43ff06a5002a1dd15ac570b06f84c4c29cec9b26f803a7640d0800c46a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 00439baaedac570dce2a670e4a923df26a82ffa57afb6e4dbfb06c916b3faad6
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 ba2169723908bdd24c59483442c97cb971421b570f4322a51a0c5356127fda4c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 8e6552a43a77f2967f73f53081814f09160da5fd06cb0cd8a2443a16888610df
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 82411428d06ca2de0634a290ccaaa0fd080bc4b8f1c6f63b30c986cda8dc44ed
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 e72f440965be5e030e9abbf301d53b1771dc0ac836b893b2a01828b82947bcd5
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 a2a2d7ef0224fc59867b690fc912e3960deb252d6ef90d06396ed7f9b3424830
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 5a6b66e51b09de8a6c48f7af7442eeaf3452eaf87bb1d43650eaee9f421cb391
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 4e4e17739b77f16429a2cbe08e898d060b0cc33a1a35fb58227e3ed3c644b0dd
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 56c70907da8b674a017cc59faa54d060561ea1eaf46a51358e3457f354d2fcf0
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 58731eb86e4fcd060cf5bfdf824cc84790e707422d50f1e6eecff5b920e4f280
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 546B
                                                                • SHA256 a929116c24c48955841b9c2241744dc8c1112297fe9c96311f59d0e8aaf4ddea
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 722B
                                                                • SHA256 14783f12f5f79d42fa6b78835e81622ef2f7093a43e06c8dbb6146e3c34442d2
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 816B
                                                                • SHA256 0255640c1011396de17ac2c5a30c2ad95377b5b6dadf423e6d33c38ec1e929f2
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 912B
                                                                • SHA256 8305127baf0c58b958793e35c6ac1a52c65e92e78e22a6487a3435107fa2418e
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 df9697461ea1bc2376bde52ee72dbd8f9dbf86c0532b328f4950939e57f966e7
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 448B
                                                                • SHA256 2e9196f0067da13f93b965b5b7e468475af1fd96d8ec8f552e548f9d0fe02925
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 636B
                                                                • SHA256 72b43dbb8a6538618e1b52428af812311e0cc3e1ec81d3a9e4860b8d03d1915d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 48fca7efc67f5b1d1312e667541ad3f1227dde935070b3408e116d45821d4053
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 2ac3e726e71bb4bae568d070bcb53d66b1b28558cd264704dd16cfb1bd4955f4
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 200B
                                                                • SHA256 faae40c68aaa49dd62146f1a973e70c65c2996a0f16e077dbda2c91f5eaae395
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 355B
                                                                • SHA256 3b57420cdd9d8174c491ce0a92168dbd45acf8b23c67c68f75458ac155ef2ca3
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 c02b42753aecc5783fc418ac8de1ffab783e1f4f0ca0f991df916a1ecf4b27d4
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2240.1.713939362
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2240.1.713939362
                                                                • Size 1KB
                                                                • SHA256 011a305dbf39f7eb7ad549c7277021534a3442a8be25df6d8b79aa5ea5bfe5cf
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2416.0.163497164
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2416.0.163497164
                                                                • Size 265B
                                                                • SHA256 5c336b89afee235dbfe7acae12dcd6705bbd5ce02de4ca460999b159cbc9f756
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2416.0.163497164
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2416.0.163497164
                                                                • Size 2KB
                                                                • SHA256 2fb89f16a361af8b27cc8fabdea08f81a34999730456b3ad83141a625a3dc790
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2416.0.163497164
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2416.0.163497164
                                                                • Size 1KB
                                                                • SHA256 451ebc15c878a167d7fad53bdc7acf803e871eab08e4df97f4ec677da512cb0d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp5764.0.1850638486
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5764.0.1850638486
                                                                • Size 265B
                                                                • SHA256 7635c3da85f5b2c7f87c15c183ca7903f6c3ea93f194fa009744d4ea2d027d4c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp5764.0.1850638486
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5764.0.1850638486
                                                                • Size 1KB
                                                                • SHA256 a01bca76be0afee2873f94d8792b4fe4b21baa7f1536738cadeb0eb95663b63b
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp5764.0.1850638486
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5764.0.1850638486
                                                                • Size 2KB
                                                                • SHA256 06f9dc7680a97f0f0b43cc7a4877ddd1c81bb073493204f737f1d12b92e1f43d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                suggestions_cache.jsona347e947-49df-4dfa-9072-66fc1ae53d8a.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.jsona347e947-49df-4dfa-9072-66fc1ae53d8a.tmp
                                                                • Size 652KB
                                                                • SHA256 30c9a05b7948cb98e6ae360f0e8323f2e7f3f506d304fceaa3fde6c41aade84e
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                data_0
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
                                                                • Size 8KB
                                                                • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                Submit Download

                                                                data_1
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                • Size 264KB
                                                                • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                • Size 2KB
                                                                • SHA256 a150a28b3849af342391655d056d3a30f10d5e52981a7468650b32656dfd31c6
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                • Size 4KB
                                                                • SHA256 8f30c6b647e1aa19abc80db50d585fa71ffdf74814a9c88c73b342091ab7b3db
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                • Size 5KB
                                                                • SHA256 10180d77d6ff147fea2334ffaa4577c5d24acb28cd78cc3b68035cbb9cb01118
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                • Size 3KB
                                                                • SHA256 46572143f046e39a0b8e7a2d3dc90b3ed8fabd0eb811e6b1838b44db739971a8
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Local Statef1fb13a9-2ca6-43cb-b7b3-f39c11256c7d.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local Statef1fb13a9-2ca6-43cb-b7b3-f39c11256c7d.tmp
                                                                • Size 3KB
                                                                • SHA256 2d18c9f61fc9e3df301ad9f536b34407a802e37bffa2c42c1427bd2ef2af0bb3
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                VariationsSeedV2
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                • Size 11B
                                                                • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                VariationsSeedV2
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                • Size 19B
                                                                • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                opera-one.jpg
                                                                • Path C:\Windows\SystemTemp\scoped_dir2240_455428984\opera-one.jpg
                                                                • Size 194KB
                                                                • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                persona.ini
                                                                • Path C:\Windows\SystemTemp\scoped_dir2240_455428984\persona.ini
                                                                • Size 207B
                                                                • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                opera-one-dark.jpg
                                                                • Path C:\Windows\SystemTemp\scoped_dir2240_641753524\opera-one-dark.jpg
                                                                • Size 349KB
                                                                • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                persona.ini
                                                                • Path C:\Windows\SystemTemp\scoped_dir2240_641753524\persona.ini
                                                                • Size 217B
                                                                • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                memory/4564-566-0x00007FFE4EA00000-0x00007FFE4EA01000-memory.dmp
                                                                Download

                                                                memory/4564-565-0x00007FFE4DEF0000-0x00007FFE4DEF1000-memory.dmp
                                                                Download

                                                                memory/5732-3590-0x000001C825A10000-0x000001C825A11000-memory.dmp
                                                                Download

                                                                memory/5732-3587-0x000001C825A10000-0x000001C825A11000-memory.dmp
                                                                Download

                                                                memory/5732-3583-0x000001C825A10000-0x000001C825A11000-memory.dmp
                                                                Download

                                                                memory/5732-3588-0x000001C825A10000-0x000001C825A11000-memory.dmp
                                                                Download

                                                                memory/5732-3589-0x000001C825A10000-0x000001C825A11000-memory.dmp
                                                                Download

                                                                memory/5732-3581-0x000001C825A10000-0x000001C825A11000-memory.dmp
                                                                Download

                                                                memory/5732-3592-0x000001C825A10000-0x000001C825A11000-memory.dmp
                                                                Download

                                                                memory/5732-3591-0x000001C825A10000-0x000001C825A11000-memory.dmp
                                                                Download